eBooks/eGuides

44 Ransomware Defense For Dummies, Cisco Special Edition These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. and impact. The FBI says it has been challenging "to ascertain the true number of ransomware victims as many infections go unreported." The FBI is concerned that victims are not reporting infections for a number of reasons — one main reason being that victims don't see the point in doing so, especially if they resolve the issue internally either by paying the ransom or cleaning the malware infection. The FBI doesn't advocate paying a ransom. "Paying a ransom does not guarantee the victim will regain access to their data," according to the FBI. "In fact, some individuals or organizations are never provided with decryption keys after paying a ransom. Paying a ransom emboldens the adversary to target other vic- tims for profit, and could provide incentive for other criminals to engage in similar illicit activities for financial gain." To report an infection, go to www.ic3.gov and provide the following: » Date of infection and victim company information (such as industry type and business size) » Ransomware variant (identified on the ransom page or by the encrypted file extension) » How the infection occurred (for example, a link in an email, browsing the Internet) » Requested ransom and amount paid (if any) » Attacker's Bitcoin Wallet address (may be listed on the ransom page) » Overall losses associated with a ransomware infection (including the ransom amount and victim impact statement)

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA